Open tasks & progress

Open tasks

• Follow-up infra rename (new, 2026-07-16): the OKD namespace vanos, live domains (prime.tpl.one, vanos-chat.tpl.one, vanos-planka.tpl.one), Cloudflare/package project names (prime-mission-control, vanos-wiki-chat), the vault: vanos OKF frontmatter slug, 1Password paths, and the two nightly routine names all still say "vanos" after today's company-identity correction — intentionally left alone since renaming them is a real infra migration (DNS, OKD namespace move, Cloudflare project rename, federation-map update in master-vault), not a text edit. Decide whether/when to do this migration, and who has the Cloudflare/OKD access to do it safely.
• Regenerate the Stage-1 offer PDF (09-Various/offers/2026-07-03-vanos-stage1-requirement-analysis-offer.pdf): generate-stage1-offer-pdf.py text was updated today to say Prime Products/Prime Products Ltd/TPL-PRIME-2026-001, but the compiled PDF binary + its filename still show the old name. Needs a machine with fpdf2 + DejaVu fonts, network access to fetch the TPL logo, and the script's hardcoded VAULT path corrected to the actual checkout path before re-running; then rename the output file.
• Confirm Graph API mailbox/attachment-permission model with Evangelia (IT) before the pilot automation build starts — the M365 search connector can't expose attachment content (see "Right now"); needs the IT intro first
• TPL C-suite review of the pilot offer (TPL-PRIME-2026-002, €51,000) → issue to Prime Products (status draft → issued)
• Finish the Planka rollout (ADR-014, planka+planka-postgres already live in vanos, planka/): (1) create the Cloudflare Tunnel + Access policy for vanos-planka.tpl.one (TPL-only) — needs Cloudflare account access this checkout doesn't have — then oc create secret planka-tunnel + oc apply -f planka/deploy/cloudflared.yaml; (2) resolve the admin-login "Invalid credentials" issue (see "Right now") — retest via the real hostname, fall back to npm run db:create-admin-user if it persists; (3) run planka/seed-tasks.mjs to seed the Program Epics + Pending Tasks boards
• Await from Prime Products (call action items): Fotini's team-details email (names/roles/emails/tools — including whether Tsatsou/Makris/Apergi seen in the sample corpus are cylinders-team members) + intro to Evangelia (IT); first batch of 6 sample order emails received and fully distilled 2026-07-15 (content read manually via Outlook web — automated ingestion still blocked, see "Right now") — still need the remaining volume toward 20–50 sample order emails + matching SoftOne orders. TPL side: send meeting notes to Kostas + team; schedule the follow-up (data-handoff) call
• Start Phase 1 of the pilot discovery plan when the intro lands: department deep-dive interviews + desk-side observation + KPI baseline (time-to-close); Phase 2 in parallel via Evangelia — verify SoftOne Web Services live, mailbox access model, names/access of the ~3 customer platforms
• Decide pilot infrastructure (cloud interim vs waiting for on-prem hardware) — needs an ADR (discovery-plan open risk)
• After the first nightly board PRs: judge noise; consider auto-merge for pure status refreshes (ADR-009 relaxation clause)
• Tighten the wiki-chat tunnel ingress to /api/* only (standalone page/healthz currently public at vanos-chat.tpl.one — UI shell only, chat gated)
• Provision the OKD side of ADR-013 (chat corpus auto-redeploy is dormant — confirmed still skipping on every 2026-07-15 merge): the binary BuildConfig bc/wiki-chat already exists and works (used for the 2026-07-15 manual redeploy); what's left is a dedicated SA ci-chat-deploy + edit role in vanos, a long-lived token → 1Password → GitHub secrets OKD_TOKEN/OKD_SERVER; verify api.okd.tpl.one:6443 is reachable from GitHub runners (else r720 self-hosted runner). Until this lands, every knowledge-affecting merge needs a manual wiki-chat redeploy (recipe: agent memory okd-access-vanos) — corpus was at 93 published docs matching the site as of 2026-07-15.
• Wiki-chat follow-ups: key-rotation runbook (OKD Secrets + Pages env), revisit eu.* inference profile for Opus 4.6 when it ships (traffic currently via us-east-1 — ADR-008); ~~corpus-freshness rebuild hook~~ → solved by ADR-013 (pending the secrets above)
• CEO review: project charter, governance model, board presentation outline; confirm start month + program name
• TPL C-suite review of the draft offer → issue to Prime Products (status draft → issued); confirm day rates (€1,100/€700/€450) against the TPL rate card first
• Add Microsoft Entra ID as Cloudflare Access IdP (needs Entra app registration); OTP email PIN works meanwhile — prime.tpl.one is LIVE behind Access (ADR-006), CI auto-deploys on every push
• Move secrets/cloudflare*.key (untracked, git-ignored) into the Prime Products 1Password vault once provisioned
• Greek working translations of the five questionnaires for administration
• Discovery kickoff (M1): interviews per requirement-analysis-framework; validate company profile and all department-plan assumptions
• Verify SoftOne Web Services availability + HQ server-room power/cooling (technical/IT questionnaire) — gates the hardware order
• First infrastructure capture in 03-Infrastructure/
• 1Password vault for Prime Products secrets — ADR pending; first credentials exist meanwhile in the INFRA-OKD vault (op://INFRA-OKD/infra-vanos-chat-bedrock-key) and should migrate when the Prime Products vault lands
• Eyeball pass on OKF Graph in a real browser (drop the repo root on it) — headless checks passed, human look at layout/feel pending
• (later) Link-check script + additional hooks per the infra-okd pattern; Onyx/context-lake ingestion